CVE-2024-34989 Information

Description

In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop a guest can perform SQL injection via `PrestaPDFProductListModuleFrontController::queryDb().'

Reference

https://security.friendsofpresta.org/modules/2024/06/20/prestapdf.html

Share on: